scispace - formally typeset
Journal ArticleDOI

Inside the Slammer worm

TLDR
The Slammer worm spread so quickly that human response was ineffective, and why was it so effective and what new challenges do this new breed of worm pose?
Abstract
The Slammer worm spread so quickly that human response was ineffective. In January 2003, it packed a benign payload, but its disruptive capacity was surprising. Why was it so effective and what new challenges do this new breed of worm pose?.

read more

Citations
More filters

Ensuring QoS During Bandwidth DDoS Attacks

Moti Geva
TL;DR: This thesis argues that to meet the increasing threats, more advanced defenses should be put in place to address distributed denial of service (DDoS) attacks, and that so far, BW-DDoS has employed relatively crude, inefficient, "brute force" mechanisms.

Anomaly Detection in Network Traffic and Automatic Filtering

TL;DR: The results show that SWorD accurately detects over 75% of all infected hosts within six seconds, making it an attractive solution for the worm detection problem.
Book ChapterDOI

Statistical Anomaly Detection on Real e-Mail Traffic

TL;DR: The method is a threshold method and, in the dataset, it identified various worm activities and the results are shown in order to stimulate new approaches and debates in Anomaly Intrusion Detection Techniques.
Proceedings ArticleDOI

Stopping Internet Epidemics

TL;DR: The results show that Vigilante can contain fast spreading worms that exploit unknown vulnerabilities without false positives, and can be used to protect software as it exists today in binary form.
References
More filters
Proceedings Article

Inferring internet denial-of-service activity

TL;DR: This article presents a new technique, called “backscatter analysis,” that provides a conservative estimate of worldwide denial-of-service activity, and believes it is the first to provide quantitative estimates of Internet-wide denial- of- service activity.
Proceedings Article

How to Own the Internet in Your Spare Time

TL;DR: This work develops and evaluates several new, highly virulent possible techniques: hit-list scanning, permutation scanning, self-coordinating scanning, and use of Internet-sized hit-lists (which creates a flash worm).
Proceedings ArticleDOI

Code-Red: a case study on the spread and victims of an internet worm

TL;DR: The experience of the Code-Red worm demonstrates that wide-spread vulnerabilities in Internet hosts can be exploited quickly and dramatically, and that techniques other than host patching are required to mitigate Internet worms.
Proceedings ArticleDOI

Internet quarantine: requirements for containing self-propagating code

TL;DR: The design space of worm containment systems is described using three key parameters - reaction time, containment strategy and deployment scenario - and the lower bounds that any such system must exceed to be useful today are demonstrated.
Journal ArticleDOI

Inferring Internet denial-of-service activity

TL;DR: In this paper, the authors present a new technique, called backscatter analysis, that provides a conservative estimate of worldwide denial-of-service activity, and quantitatively assess the number, duration and focus of attacks, and qualitatively characterize their behavior.